Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/PWHsTH8X1Vr00GBDDVMGSRLnMaY.roa
File: PWHsTH8X1Vr00GBDDVMGSRLnMaY.roa (raw, json)
Hash identifier: nTpasJWxJAq7FxZxH6T8ffiTjm7bwLIWi4CBIG7ioHk=
Subject key identifier: 3D:61:EC:4C:7F:17:D5:5A:F4:D0:60:43:0D:53:06:49:12:E7:31:A6
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 06A5ACF9
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/PWHsTH8X1Vr00GBDDVMGSRLnMaY.roa
Signing time: Mon 11 Apr 2022 05:39:23 +0000
ROA not before: Mon 11 Apr 2022 05:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 109.122.206.0/23 maxlen: 23
109.122.212.0/23 maxlen: 23
109.122.211.0/24 maxlen: 24
109.122.218.0/23 maxlen: 23
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111521017 (0x6a5acf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Apr 11 05:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d61ec4c7f17d55af4d060430d53064912e731a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:08:44:a4:29:be:1d:dd:df:87:bb:45:22:
d3:43:f9:c3:25:cf:cd:be:b6:a1:db:10:65:11:04:
2d:28:71:9d:07:22:39:65:88:1b:8b:de:60:68:92:
db:fc:2e:ec:f1:cb:97:a1:fe:79:28:7d:e4:ec:63:
1b:bf:da:74:e9:37:77:52:0c:8d:79:19:a6:36:3e:
b4:f1:6d:b7:e8:91:c5:1f:93:d0:7e:05:55:4e:65:
a1:02:59:04:59:f9:40:7c:be:bb:aa:11:d9:c7:ec:
dc:cb:b8:8a:51:56:a5:90:0b:72:a3:27:b7:8b:c9:
81:f2:3e:2c:8d:d7:d3:16:a1:d9:a6:e2:7c:c7:ec:
2f:f1:87:87:38:1d:83:58:2c:b0:81:c4:6e:6d:7e:
89:7c:8f:fa:7b:8c:23:ab:c9:5c:b9:6f:e3:43:6f:
de:ce:a0:fc:65:13:52:0c:43:d2:01:e7:c8:be:aa:
24:49:c2:66:bf:64:3b:af:cd:05:6c:59:80:2d:a9:
d9:c2:d2:68:55:e2:e9:8a:46:fa:6b:a1:98:f0:11:
7e:db:49:4b:fa:d6:95:b6:8e:f1:ae:9b:a9:28:3c:
db:22:e1:bb:1a:5a:81:67:dc:49:b2:cc:ca:44:64:
94:e8:c8:87:77:20:0e:ac:7d:09:66:ae:b4:13:fe:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:EC:4C:7F:17:D5:5A:F4:D0:60:43:0D:53:06:49:12:E7:31:A6
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/PWHsTH8X1Vr00GBDDVMGSRLnMaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.206.0/23
109.122.211.0-109.122.213.255
109.122.218.0/23
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f8:16:8a:4d:59:85:c4:6d:24:0d:fd:fd:3d:08:d0:4a:ed:
a6:4f:12:75:cb:1d:eb:7b:e8:cb:1c:70:03:8a:f6:dd:f2:5f:
b2:31:df:6d:da:3c:ae:d0:e9:a3:3b:82:bd:b3:71:c2:69:94:
7f:e5:9b:c8:90:e6:17:ef:4f:a8:45:b0:f1:42:c4:41:e1:73:
3d:90:84:b9:75:a0:d1:32:77:f5:64:f1:c6:3d:83:fd:8e:db:
63:2f:b5:99:50:71:63:6f:23:a9:16:4d:5b:d9:0b:ee:9a:a9:
db:fc:7d:86:10:a2:20:63:c8:c6:bf:da:03:2c:66:cd:2d:e3:
49:bf:bc:9d:f0:ff:76:e6:7d:5e:85:e4:f3:c1:7c:35:9c:26:
0d:96:83:33:8f:a7:39:62:9f:00:85:d4:fe:2b:c2:a9:87:23:
80:6e:dd:b0:e4:6f:86:ee:e1:4b:4c:4a:ec:76:ab:58:d4:d7:
c7:ef:17:29:25:75:73:c4:31:ae:8c:00:6c:8d:e2:b1:61:4c:
17:3f:59:4f:48:47:c5:5c:48:a8:88:6c:8c:01:51:a6:e8:45:
37:14:6a:0c:22:ad:2b:b0:40:67:75:8e:84:a6:b5:2e:7e:cd:
4c:0b:85:ed:b3:df:41:52:ca:d5:5b:a9:93:67:87:d0:19:7e:
21:55:f6:05
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEBqWs+TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGJhNWI3NDRlOGRmNTAzZDk0ZjQxZmIyOTAyNDI4OWM2ZmE1ZTViMB4XDTIyMDQx
MTA1MzkyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Q2MWVjNGM3ZjE3
ZDU1YWY0ZDA2MDQzMGQ1MzA2NDkxMmU3MzFhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALnhCESkKb4d3d+Hu0Ui00P5wyXPzb62odsQZREELShxnQci
OWWIG4veYGiS2/wu7PHLl6H+eSh95OxjG7/adOk3d1IMjXkZpjY+tPFtt+iRxR+T
0H4FVU5loQJZBFn5QHy+u6oR2cfs3Mu4ilFWpZALcqMnt4vJgfI+LI3X0xah2abi
fMfsL/GHhzgdg1gssIHEbm1+iXyP+nuMI6vJXLlv40Nv3s6g/GUTUgxD0gHnyL6q
JEnCZr9kO6/NBWxZgC2p2cLSaFXi6YpG+muhmPARfttJS/rWlbaO8a6bqSg82yLh
uxpagWfcSbLMykRklOjIh3cgDqx9CWautBP+jG8CAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBQ9YexMfxfVWvTQYEMNUwZJEucxpjAfBgNVHSMEGDAWgBRQult0To31A9lP
QfspAkKJxvpeWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VMcGJkRTZOOVFQWlQwSDdLUUpDaWNiNlhscy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvN2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8x
L1BXSHNUSDhYMVZyMDBHQkREVk1HU1JMbk1hWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
N2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8xL1VMcGJkRTZOOVFQ
WlQwSDdLUUpDaWNiNlhscy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAW16zjAMAwQAbXrTAwQBbXrUAwQB
bXraAwQAbXrfMA0GCSqGSIb3DQEBCwUAA4IBAQAN+BaKTVmFxG0kDf39PQjQSu2m
TxJ1yx3re+jLHHADivbd8l+yMd9t2jyu0OmjO4K9s3HCaZR/5ZvIkOYX70+oRbDx
QsRB4XM9kIS5daDRMnf1ZPHGPYP9jttjL7WZUHFjbyOpFk1b2Qvumqnb/H2GEKIg
Y8jGv9oDLGbNLeNJv7yd8P925n1eheTzwXw1nCYNloMzj6c5Yp8AhdT+K8KphyOA
bt2w5G+G7uFLTErsdqtY1NfH7xcpJXVzxDGujABsjeKxYUwXP1lPSEfFXEioiGyM
AVGm6EU3FGoMIq0rsEBndY6EprUufs1MC4Xts99BUsrVW6mTZ4fQGX4hVfYF
-----END CERTIFICATE-----
Generated at Tue May 13 20:37:35 2025 by rpki-client